Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/323830343a316162303a3a2f33332d3333203d3e203631383736.roa
File:                     323830343a316162303a3a2f33332d3333203d3e203631383736.roa (raw, json)
Hash identifier:          0AZ+Jv1msHrFMT3xPClxfkdREKo+wmI9p7AliSfsvEc=
Subject key identifier:   F4:E5:59:F2:B4:BF:F3:C7:50:54:D2:96:E2:99:8D:E7:9A:BF:AA:E2
Certificate issuer:       /CN=4FD2257689EE83DB094839D2005FC336CC9380AC
Certificate serial:       37E81E03FEE32C19B2DEDF0D289F82C338DC4891
Authority key identifier: 4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/323830343a316162303a3a2f33332d3333203d3e203631383736.roa
Signing time:             Tue 21 Jan 2025 16:51:12 +0000
ROA not before:           Tue 21 Jan 2025 16:46:12 +0000
ROA not after:            Tue 20 Jan 2026 16:51:12 +0000
asID:                     61876
IP address blocks:        2804:1ab0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl
                          rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 09:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e8:1e:03:fe:e3:2c:19:b2:de:df:0d:28:9f:82:c3:38:dc:48:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FD2257689EE83DB094839D2005FC336CC9380AC
        Validity
            Not Before: Jan 21 16:46:12 2025 GMT
            Not After : Jan 20 16:51:12 2026 GMT
        Subject: CN=F4E559F2B4BFF3C75054D296E2998DE79ABFAAE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9b:c0:24:4f:44:a1:f6:25:d1:ef:87:ae:eb:
                    83:af:81:de:6d:e4:9f:c2:7c:6a:34:c1:68:7e:69:
                    fe:ff:23:a4:59:f0:5f:69:5c:24:65:1e:0e:c1:ad:
                    95:7c:78:23:79:3a:44:50:a2:46:4b:d2:1c:31:33:
                    67:d5:99:c1:6c:60:93:14:fd:35:7a:51:90:0e:88:
                    15:4c:93:99:27:11:ea:33:47:8c:55:3b:11:e6:97:
                    71:a3:a1:7f:f6:b0:18:53:25:7e:42:29:bf:40:8e:
                    32:3f:c3:9f:ba:93:b3:3a:05:75:13:b7:76:ac:65:
                    c9:89:49:24:dd:e7:a5:48:aa:64:5a:a8:e6:3a:55:
                    ed:a2:d0:3f:db:96:57:41:6e:65:10:38:ff:20:75:
                    5e:b1:82:c8:68:eb:99:88:aa:d0:35:7d:a1:3b:a8:
                    81:53:c0:76:00:a9:b2:83:df:a9:c8:be:18:e4:20:
                    a5:59:b9:e1:2a:8e:1f:17:1f:03:cf:2a:27:98:78:
                    52:f1:03:52:43:03:12:f5:87:63:e7:8d:9b:e5:c6:
                    da:76:e1:41:2f:e6:dd:4d:df:1b:73:7b:23:d7:b8:
                    b7:90:04:76:fd:ab:6f:09:25:ed:95:ac:c6:f2:ba:
                    9b:37:1a:4e:cf:0d:f7:2f:bd:58:2d:1e:65:1c:31:
                    09:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E5:59:F2:B4:BF:F3:C7:50:54:D2:96:E2:99:8D:E7:9A:BF:AA:E2
            X509v3 Authority Key Identifier:
                keyid:4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/323830343a316162303a3a2f33332d3333203d3e203631383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ab0::/33

    Signature Algorithm: sha256WithRSAEncryption
         a9:af:6c:3a:08:ff:7b:0a:f5:61:62:90:e8:b2:0b:da:2e:f1:
         31:ff:ad:4f:98:89:e4:8e:73:b6:e7:60:41:bd:2e:33:3a:a1:
         53:8b:f1:d0:7c:c0:f2:18:6a:2c:26:b5:3c:41:19:ab:82:e2:
         27:91:22:d2:c9:7c:5c:1f:49:3a:e5:9e:2a:be:46:d3:df:67:
         8b:a6:4e:6f:0e:77:2d:20:91:40:4c:35:de:94:5e:76:f9:77:
         d2:39:76:a9:c9:df:ca:f4:7b:c2:c7:0f:92:15:99:d9:f6:35:
         9c:63:26:de:aa:d1:a5:3c:ca:c5:77:16:04:cf:97:70:4e:fe:
         73:fe:a8:91:6f:d1:c1:16:13:16:da:a1:5b:4d:46:c7:d6:11:
         15:02:ad:dc:c1:a2:b9:2a:3b:de:e2:c4:7d:3b:86:41:d5:69:
         ed:f7:cc:2e:8b:36:27:61:98:f3:9c:10:c9:37:dd:74:9f:a4:
         18:0f:1c:d4:0f:ce:c2:dd:1b:97:d7:15:a2:d6:56:ea:ef:64:
         b1:d2:61:d1:91:44:65:bf:33:3a:eb:80:b8:a5:8d:9c:23:0a:
         28:c4:df:3a:e1:95:36:4a:47:ca:56:a5:65:b0:ce:3d:2c:47:
         c6:71:03:aa:73:d9:55:f4:f5:f3:d0:e7:dc:72:71:53:d6:6e:
         c6:5b:4d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:22:01 2025 by rpki-client